e1ec06f9c6202ec28875714fbbfce8f2e15f6038004682c1cb21fdcd176a6600

Sharing

Copy URL Twitter E-mail

General

Target
e1ec06f9c6202ec28875714fbbfce8f2e15f6038004682c1cb21fdcd176a6600
Size 2.0MB
Sample260623-pystvscy6j
SHA256 e1ec06f9c6202ec28875714fbbfce8f2e15f6038004682c1cb21fdcd176a6600
MD5 d6fd9e2eafb90871196d66881688b738
SHA1 469840bb3d1f2a15a02d3f1efeb8c68398461b59
SHA512 7cfbf8b50791b0c2871607abb61f807dbb36cfea751a9a504cd689b614e5774a6c7425f100c29602a9321e3bd146fe4a6d94b59196f19e47ce71c84c433c4056
SSDEEP 24576:Y1n4jKxP9782X16F0Y2/5LyXpHsDdrAjCjmCnSpJcJiEwbnp84zfSJ4lXBp+i2JW:qXL72C2GZw984zfSQCi0C
TLSH
T18A957D03FA828DB5D2140630D8EB5FB56B7ADC854E359313BB74FF2D6CB2719A841298
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1ec06f9c6202ec28875714fbbfce8f2e15f6038004682c1cb21fdcd176a6600

File Explorer

e1ec06f9c6202ec28875714fbbfce8f2e15f6038004682c1cb21fdcd176a6600

.exe 2.0MB

e1ec06f9c6202ec28875714fbbfce8f2e15f6038004682c1cb21fdcd176a6600

IMPHASH 0dcdcb8619885502e2c799bf1e536633
SHA256 e1ec06f9c6202ec28875714fbbfce8f2e15f6038004682c1cb21fdcd176a6600
MD5 d6fd9e2eafb90871196d66881688b738
SHA1 469840bb3d1f2a15a02d3f1efeb8c68398461b59
SHA512 7cfbf8b50791b0c2871607abb61f807dbb36cfea751a9a504cd689b614e5774a6c7425f100c29602a9321e3bd146fe4a6d94b59196f19e47ce71c84c433c4056
SSDEEP 24576:Y1n4jKxP9782X16F0Y2/5LyXpHsDdrAjCjmCnSpJcJiEwbnp84zfSJ4lXBp+i2JW:qXL72C2GZw984zfSQCi0C
TLSH
T18A957D03FA828DB5D2140630D8EB5FB56B7ADC854E359313BB74FF2D6CB2719A841298
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

808397

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

dinput

DirectInputCreateEx

kernel32

OutputDebugStringA GetSystemDefaultLangID Sleep ReadFile GetSystemTime GetFileTime WriteFile SetFileTime SetFilePointer WaitForSingleObject CloseHandle GetTickCount CreateFileA GetFileSize FreeEnvironmentStringsA HeapSize GetCurrentProcess UnhandledExceptionFilter UnmapViewOfFile CreateFileMappingA MapViewOfFile GetLocalTime SetPriorityClass CreateMutexA GetWindowsDirectoryA DeleteFileA FreeEnvironmentStringsW CreateEventA GlobalFree CreateThread GlobalAlloc SetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection ResetEvent InitializeCriticalSection WaitForMultipleObjects QueryPerformanceCounter QueryPerformanceFrequency GetDriveTypeA GetLogicalDriveStringsA GetVersionExA GetFullPathNameA GetPrivateProfileIntA GetPrivateProfileStringA MultiByteToWideChar InterlockedDecrement InterlockedIncrement GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess HeapFree HeapAlloc RtlUnwind RaiseException WideCharToMultiByte LCMapStringA LCMapStringW GetProcAddress GetLastError TerminateProcess GetModuleFileNameA GetCPInfo SetUnhandledExceptionFilter GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetCurrentThreadId TlsSetValue TlsAlloc SetLastError TlsGetValue GetEnvironmentVariableA HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc IsBadWritePtr GetOEMCP GetStringTypeA GetStringTypeW GetACP SetEndOfFile LoadLibraryA IsBadReadPtr IsBadCodePtr SetStdHandle FlushFileBuffers

user32

MessageBoxA SetFocus GetWindowTextA CreateWindowExA DestroyWindow SetWindowLongA CallWindowProcA GetWindowLongA ClientToScreen GetCursorPos ToAsciiEx MapVirtualKeyExA GetKeyboardLayout LoadIconA DrawTextA DefWindowProcA ShowCursor SetActiveWindow MoveWindow GetWindowRect RegisterClassExA LoadCursorA GetSystemMetrics UpdateWindow ShowWindow WaitMessage DispatchMessageA TranslateMessage GetMessageA MsgWaitForMultipleObjects PostMessageA PeekMessageA wsprintfA PostQuitMessage SetCursor SetWindowPos ReleaseDC GetDC GetClientRect GetParent SendMessageA RegisterClassA GetClassInfoA UnregisterClassA LoadImageA

gdi32

CreateFontA CreateCompatibleDC SelectObject BitBlt DeleteDC TextOutA SetTextColor SetBkMode GetPaletteEntries StretchBlt GetStockObject DeleteObject GetObjectA

imm32

ImmGetContext ImmReleaseContext ImmSetOpenStatus

dsound

ord1

ddraw

DirectDrawEnumerateExA DirectDrawCreateEx

ole32

CoCreateInstance CoInitialize CoUninitialize

Sharing

General

Malware Config

Signatures

File Explorer

e1ec06f9c6202ec28875714fbbfce8f2e15f6038004682c1cb21fdcd176a6600

dinput

kernel32

user32

gdi32

imm32

dsound

ddraw

ole32

generic